IDA Pro MCP

IDA Pro MCP is an open-source MCP server by mrexodia (Duncan Ogilvie) that connects IDA Pro to language-model clients so they can perform what the README calls "vibe reversing". It exposes IDA databases through MCP tools and resources for decompiling, disassembling, searching, annotating and patching binaries. The README now recommends the official Hex-Rays IDA MCP Server instead.

What It Is

IDA Pro MCP is a bridge between IDA Pro (8.3 or higher, 9 recommended; IDA Free is not supported) and MCP-compatible clients such as Claude Code, Codex, Cursor, Cline, VS Code, Gemini CLI, Zed and others. It runs either as an IDA GUI plugin or as a headless idalib-based server, and requires Python 3.11+ and uv.

How the Workflow Operates

A client opens a binary with idb_open, then calls tools against a named database session. Core tools include decompile, disasm, xrefs_to, callees, callgraph, basic_blocks and analyze_funcs. Search tools cover regex, byte patterns, instruction sequences and immediates. Modification tools set comments, rename functions and variables, apply types, declare structs, define code and patch bytes or assembly. An optional debugger extension offers breakpoints, stepping, register and memory access. A py_eval tool runs Python inside IDA.

Headless Session Model

idalib-mcp is a supervisor that keeps each open database in a persistent idalib worker process. New supervisors adopt running workers, workers exit after an idle period, and a maximum worker count is configurable. Transports include stdio and HTTP/SSE.

Prompting Guidance

The README supplies example prompts for crackme and malware analysis, advises using the int_convert tool rather than letting the model convert number bases, and notes that obfuscated code degrades LLM results.

Current Status

The README says the GUI plugin is no longer recommended and will eventually be deprecated in favor of idalib-mcp. Latest listed release is 1.4.0.